Privacy Policy

Last Updated: January 2026

NOTE: This service is provided by an individual developer ("the Creator") AS IS. Use at your own risk. The Creator assumes NO LIABILITY for any data loss or code modifications.

Welcome to WhatsApp-IDE. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our WhatsApp-to-IDE bridge service.

1. Information We Collect

1.1 Account Information

GitHub Account Data: When you sign in with GitHub, we collect your GitHub user ID, email address, display name, and profile information.
WhatsApp Number: You provide your WhatsApp phone number (with country code) to enable message routing.
Authentication Token: A unique token is generated for your account to authenticate your local runner.

1.2 WhatsApp Messages

Self-Chat Messages Only: WhatsApp-IDE only processes messages you send to yourself in your personal WhatsApp "Me" chat. We never access messages from other contacts or groups.
Message Content: Text messages, image captions, and voice notes you send to yourself are temporarily processed to execute AI agent tasks.
Media Files: Images and voice notes you send are temporarily uploaded to Firebase Storage for AI processing (vision/audio analysis), then deleted after processing.

1.3 Project & Code Context

Local Filesystem Access: When running the WhatsApp-IDE Runner on your machine, the AI agent can read, write, and list files in your project directory as instructed by you.
Shell Commands: The agent executes shell commands on your machine only when explicitly requested through your messages.
GitHub Integration: If you provide a GitHub token, the agent can read repository information, list issues, and create issues on your behalf.

1.4 Chat History

Persistent Conversation History: Your conversation history with the AI agent is stored locally on your machine in .nexus-history-[your-number].json files to maintain context across sessions.
Cloud Logging: We do not store your conversation history in the cloud. All message processing happens locally or transiently through the Gateway.

1.5 Technical & Usage Data

Connection Logs: Server logs include timestamps, connection status, and basic debugging information.
Error Reports: Error messages and stack traces may be logged for debugging purposes.

2. How We Use Your Information

We use your information exclusively to provide the WhatsApp-IDE service:

Authentication: Verify your identity and route messages to the correct runner instance.
Message Processing: Execute AI agent tasks based on your instructions sent via WhatsApp.
Code Operations: Read, write, and modify files in your local project directory as requested.
AI Processing: Send your messages, images, and voice notes to Google Gemini API for natural language understanding and task execution.
Service Improvement: Analyze error logs to improve stability and performance.

3. Data Storage & Retention

3.1 Firebase Firestore

User Profiles: Your GitHub account info, WhatsApp number, and authentication token are stored in Firestore.
Retention: User data is retained as long as your account is active. You can request deletion at any time.

3.2 Firebase Storage

Media Files: Images and voice notes are temporarily stored for AI processing, then deleted automatically.
Screenshots: Screenshots captured by the agent are stored temporarily and can be deleted by you.

3.3 Local Storage

WhatsApp Auth: WhatsApp session credentials are stored locally in auth_info_baileys/ folder.
Chat History: Conversation history is stored locally in .nexus-history-*.json files.

4. Third-Party Services

WhatsApp-IDE integrates with the following third-party services:

4.1 WhatsApp (Meta Platforms)

We use the @whiskeysockets/baileys library to connect to WhatsApp Web.
Your WhatsApp session is authenticated directly between your device and WhatsApp servers.
We do not store your WhatsApp login credentials.

4.2 Google Gemini API

Your messages, images, and voice notes are sent to Google's Gemini AI for processing.
Google's privacy policy applies: Google Privacy Policy

4.3 Firebase (Google Cloud)

Used for user authentication, database, and file storage.
Governed by Google's Firebase privacy policy: Firebase Privacy

4.4 GitHub API

Used for authentication and optional repository operations (if you provide a GitHub token).
GitHub's privacy policy applies: GitHub Privacy

5. Data Security

End-to-End Message Flow: Messages flow from WhatsApp → Gateway → Runner (your local machine) → AI → Back to you. We do not store message content permanently.
Token-Based Authentication: All runner connections require a unique authentication token.
Local Processing: Most code operations happen entirely on your local machine.
No Third-Party Sharing: We do not sell or share your data with third parties except for the AI processing services described above.

6. Your Rights & Control

Agent Mode Toggle: You can disable the AI agent at any time by sending /agent-off to your WhatsApp "Me" chat.
Data Deletion: You can delete your account and all associated data by contacting us or deleting your Firestore user document.
Local Data Control: You can delete local chat history files (.nexus-history-*.json) and WhatsApp auth files at any time.
Access to Data: You can request a copy of your data stored in Firebase at any time.

7. Children's Privacy

WhatsApp-IDE is not intended for users under 13 years of age. We do not knowingly collect data from children.

8. International Data Transfers

Your data may be processed in servers located in the United States and other countries where Google Cloud operates. By using WhatsApp-IDE, you consent to this transfer.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date will reflect the most recent changes. Continued use of WhatsApp-IDE after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: raphco@gmail.com
GitHub Issues: nexus-whatsapp/issues